Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/m7Fxj_0F1UkNbclhzUcJS3rfG0E.roa
File: m7Fxj_0F1UkNbclhzUcJS3rfG0E.roa (raw, json)
Hash identifier: wVNGlJgnWQGwVJxkQlyp+4pLBLQDE+WnmmHrK/rD+jg=
Subject key identifier: 9B:B1:71:8F:FD:05:D5:49:0D:6D:C9:61:CD:47:09:4B:7A:DF:1B:41
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC1E4EDCFEC794BE0BB9344FACEBE9
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/m7Fxj_0F1UkNbclhzUcJS3rfG0E.roa
Signing time: Wed 01 Jan 2025 17:48:55 +0000
ROA not before: Wed 01 Jan 2025 17:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207159
IP address blocks: 185.195.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:1e:4e:dc:fe:c7:94:be:0b:b9:34:4f:ac:eb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bb1718ffd05d5490d6dc961cd47094b7adf1b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:61:6e:92:17:72:e6:3e:6f:d6:e8:03:bc:
93:b7:85:fe:61:1a:21:ac:7f:1b:7d:97:8e:7e:37:
08:d8:8b:46:57:7e:a4:05:42:b4:5e:77:9d:c9:c7:
df:a9:32:43:ed:97:eb:30:13:1f:60:f2:a6:ff:07:
fa:8c:f5:e6:d9:98:03:f5:3d:6d:0f:81:cd:bd:bd:
03:75:a4:3d:d4:fa:51:37:ca:e9:25:60:55:06:6e:
b4:b3:4b:fc:ec:39:d8:1e:63:fe:b3:ab:4b:88:0d:
c1:de:c2:1f:ce:05:13:16:8d:83:c7:71:d3:23:f3:
46:a3:85:b5:38:08:51:59:2e:58:b0:00:dd:5f:c2:
49:bb:ef:b4:a1:15:c3:db:8e:5c:2e:ff:9c:5b:e4:
86:c6:7d:d6:b6:88:3a:45:21:65:95:34:ec:08:30:
0c:9a:bf:31:27:54:c1:a1:93:03:f3:85:f7:ee:11:
c7:95:cd:a0:71:c6:f8:58:7e:00:0b:88:07:2c:7f:
4e:87:18:ea:4e:a1:e2:8b:f4:86:4b:94:51:0f:11:
21:37:a4:91:2b:99:b4:f1:35:f7:1b:d9:ce:5d:06:
c2:f6:46:f8:1b:ed:32:d9:ef:c9:c4:a5:b5:18:bd:
10:d0:95:e5:71:d8:13:2e:96:14:22:85:8b:16:74:
d5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B1:71:8F:FD:05:D5:49:0D:6D:C9:61:CD:47:09:4B:7A:DF:1B:41
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/m7Fxj_0F1UkNbclhzUcJS3rfG0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.184.0/22
Signature Algorithm: sha256WithRSAEncryption
50:10:f2:2d:15:3b:25:bf:0f:24:53:69:28:4a:b3:78:32:d7:
07:df:27:01:ff:b9:3d:d4:ed:fb:d8:a6:91:11:d4:ed:e6:0c:
50:3a:d9:d3:9f:e7:4c:42:ef:1b:98:6d:ff:d3:ea:6d:99:4a:
84:5d:0d:75:42:d4:ce:e2:60:70:70:9f:0a:62:1a:07:cf:16:
75:88:f6:7c:89:a9:94:64:92:37:af:ee:a4:ff:5e:18:c1:f3:
7f:0e:f3:10:7f:18:46:7d:6c:7d:fc:93:c7:17:91:81:af:74:
c2:fb:f8:07:8d:ae:ed:ac:fa:ca:fc:53:f9:ba:ff:49:0f:fa:
2d:62:1c:85:36:8c:fa:a1:3a:2f:ca:c3:d6:79:af:96:9a:f7:
a2:d7:9d:8e:fd:7c:05:28:0b:88:f2:fb:85:44:b1:5e:2a:e3:
bf:56:76:e7:28:7f:0b:57:fe:25:c8:92:10:0c:4f:77:66:e8:
f1:d0:1f:c5:4d:01:b1:01:7e:99:0b:37:8a:7e:1b:b9:3f:7a:
57:ec:f1:b2:cf:e1:be:02:65:73:98:18:91:95:5d:77:2a:38:
3e:d4:43:83:79:40:40:31:ff:a1:47:94:62:e0:e8:2b:cb:49:
6b:45:7b:a3:d3:26:92:e6:81:77:d9:8a:d0:63:32:aa:41:bc:
c1:64:7a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 09:52:44 2025 by rpki-client